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On behalf of the Microsoft Corporation, this declaration and the attached exhibit A Is 
submitted as proof that the changes effected by the Applicant's communication with the U.S. 
Patent and Trademark Office dated November 25, 2003 and titled "Prenminary Amendment" do 
not constitute the impermissible introduction of "new matter." The changes in the Preliminary 
Amendment are not new matter because each change is merely a correction or a darification 
that would be recognized as such by one or ordinary skill in the art. 

Indeed, I hereby dedare each of the changes in the Preliminary Miendment are not 
new matter because each change is merely a correction or a clarification that would be 
recognized as such by one or ordinar/ sWIl in the art 
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Hi, Kasey 

Here are my comments about Bin's patent's change from A to E. Please see the jfcntriinirrtril among change 



descriptions. 
Best Regards! 
Min FEHG 

Tel: +86(10)58963453 
Internet Media Group 
Microsoft Research Asia 



From: Kasey Christie 

Sent: Monday, August 06, 2007 9:00 AM 

To: 'Min FENG' 

Cc: PLaw; Carly Bokarica 

Subject: MS#306096.01 MS1-1753US ) Seeking expert advice 



Min: 



Thank you for your help. In order to prepaae for that declaration, can I get you to explain each of the 
changes? I will list each one below. ;Tfaere are 5 of fliem (changes A-E). 

Please mark your in4ine cominents with preceeding ''jMi^^ 



it represents deletions and underlined text repre-seTits aHfiitfrmg . - 

Change A 

[0050] The content publisher generates the sharing poiynomial/(';r; ovor a fuiilie field Zj^-where = SK. 
Although polynomial interpolation is described, other collections of flmctions may also be utilized. Each 
partial secret share S- may then be calculated using Equation (3), which is shown as follows: 



S. =f(id^ mod N4^N)^ (3) 
where iVis an RSA modulus and dN) is an Euler to tient function. 

[Min] For tlie part 2: Accoixiing to number theory, for any arbitrary' integer o; between 1 and N-1, 
' I mod H operations such as addition, subtraction, multiplication and division on 

tlie exponent position should mod ^(^) instead of N. TTie result o£/(x) is used on the exponent 
position of the operation ^, so the result of the poIynoinia!/fx; should mod H^X 

For the part 1 : First since N is a compound number, Zn is definitely not a finite field. So any 
operations such as addition, subti'action, multiplication and division on the exponent position 
siiould mod ^\^Xf(x) can be said that it is defined over not Zn, but any polynomial in ZfxJ 
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(coefficients are in Z) can be regarded as a polynomial in ^nb^ by mapping the coefficients 

-> mod 

These errors can be detected and corrected by any one learn some number theory. They are s 
kind of typo. The changes are correct. 



Change B 

[0053] At block 514, for instance, the content publisher may broadcast public witnesses of the sharing 

polynomial's coefficients, wMcb are denoted as where g e Z*^. After broadcast, the 

content publisher may destroy the polynomial. At block 516, each license authority id. verifies validity 
of the received partial secret share. Validity may be checked by determining if Equation (4), as shown 
below, holds for the received partial secret share S. utilizing the sharing polynomial's coefficients which 
were broadcast at block 514: 

s s Lg J ... KS } pjodi^J . (4) 

Li this way, each license authority id^^ may verify the validity of the received partial secret share S. 
without exposing or knowing the secret, i.e. the private key 5Jf. 

[Min] For part 1 : ^^^^^ ^ j^^g ^ ^^^^^ ^^^^^^ ^^^^^^ ^(k) ^^^j.^ ^ 

itself generates. S « can also be OK if g is randomly chosen from Z/?, and has no influence on 
otlier equations and fomiulas. Only a small number of ^ ^ has an oMer less than ^fCH). 

For part 2^ It is really good tliat the authors explicitly describe the equation is computed by "mod 
A^' . ^ ^ ^',1 is also an element in Zn is a subset of Z«). So the final result is "mod A^'. People in 
my field will assume the operation is *'mod A^' as defeult. 

While these changes may not be regarded exactly as en-ors. The changes make the scheme more 
clear and solid. 



Change C 

[0063] At block 620, the content player, when executed by the client device, determines if it correct partial 
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Kcenses have been received by validating each of file partial licenses. The partia] licenses may be 
validated as follows. Pirst, node p calculates 

from the public witnesses of the sharing polynomial's coefficients, as was described in relation to block 
516 of FIG. 5 and Equation (4). Equation (6) is then applied to and the received partial license pre/., 
A J, and A2 to calculate c. The received partial license prel. is verified by checking if the following 

equations hold: g" (g^)" = ^ rndpreF (prsi^y = A^. The above steps are repeated until the node p 
obtains k valid partial licenses. If ^ valid partial licenses cannot be obtained, generation of the formal- 
license fails (block 622). 

[Mill] It is really good tliat the authors explicitly describe the equation is computed by "mod N" 
People in my field will assume the operation is "mod iV" as default. This change might not be 
regarded as an eiTor. Tlie change makes the scheme more clear. 



Change D 

[0064] If A valid partial licenses are obtained, then at block 624,. the content player combines the partial 
licenses to form tiie formal license. For example, the ftode p usfes the k valid partial results to calculate 
the formal license utilizing Equation (8): 



wherei'^(j)= fl 



[Mm] Again, it is really good that the authors explicitly describe the equation is computed by "mod 
TV" . People in my field will assume tlie operation is "mod N" as default. This change may not be 
regarded as an enor. The change makes the scheme more cleai". 



Change E 

[0075] At periodic intervals, for example, the license authorities may update their respective shares of the 
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private key SK through execution of the respective update module 222 of FIG. 2. At block 802, each 
license authority i generates a random (k, m) sharing of the secret 0 using a random update polynomial/: 
jg}date(^^> ^^''^ Equation (9): 

m 

[MiB]"mod N" is definitely wrong. Because the result of ^wss^sts ^.^) used as the exponent value 
in the operation of ^ . So the result of the polynomial ^i.^v^^^ C^) should be mod ^(^"0. 1 

suggest tliat "mod ^t^i" be added explicitly attiie end of Equation 9 to avoid misundei-stciiidiiig. 

In addition, the authors shotild also explicitly state in the patent application that 

1) ^(^0 is public 

2) PK is not disclosed 

The current version does not mention explicitly the above conditions m the patent application. 
They are implicitly used to make the whole system work. Stating iJiem explicitly can help readei-s 
understand tiie equations and the whole system. 



Thank you. 



■ Kasey Christie 
(509)324-9256 x232 
kasev@leehaves.coni 



Lee & Hayes pile, IntcUectual Property Law 

42 1 West Rivrasidc, Suite 500, Spokane. WA 9920 1 1 509.323-8979 fiix | 
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